TLDR DevOps 2026-04-27

PlanetScale, Bun and Retool all chose Buildkite to orchestrate their CI a few years ago and are still with us.

After setup, they orchestrated build systems quiet enough that their devs rarely need to look at it. And from there, we kinda just... get out of the way.

If you're curious why they chose Buildkite for CI, let's give you a peek under the hood.

Our new trial unlocks everything in the product with zero commitment. Plus, there's a real human engineer on standby. His name is Ola, and he's super helpful.

We wanted to make it as easy as possible to dive in, because flow is a feature too.

Start building here →

HashiCorp released Vault 2.0 under IBM's versioning model with two-year support, introducing identity-based security, workload identity federation without static credentials, performance improvements, and breaking changes while adding SCIM, SPIFFE support, and enhanced PKI automation.

DigitalOcean Dedicated Inference is a managed LLM hosting service that deploys AI models on dedicated GPUs with Kubernetes-native orchestration, targeting teams that need predictable performance and economics for high-volume inference workloads beyond simple pay-per-token pricing. The service handles day-two operations like cluster lifecycle management and routing while giving users control over model choice, capacity, and scaling, using industry-standard components like vLLM for serving and the Kubernetes Gateway API for intelligent, KV cache-aware load balancing.

This post details how to implement PCI-DSS-compliant data protection and audit logging on Google Kubernetes Engine (GKE). It covers customer-managed encryption keys (CMEK), tokenization, DLP scanning, and 12-month immutable audit trails. The implementation framework addresses specific PCI requirements by securing cardholder data with controlled encryption keys that can be instantly revoked during breaches, while maintaining automated logging across GKE clusters, GCS buckets, and BigQuery to answer assessor questions like "show me every time someone accessed cardholder data in the last 90 days."

Software quality is driven by user perception—shaped more by repeated issues and UI/UX experience than by isolated bugs—making trust slow to build but easy to erode. To manage this, teams should focus on monitoring user “golden paths” with symptom-based metrics tied to underlying system signals, ensuring they capture both user experience and root causes effectively.

Elasticsearch's simdvec is a hand-tuned SIMD kernel library that accelerates vector distance computations across all query types, using techniques like bulk scoring, prefetching, and architecture-specific optimizations to significantly outperform alternatives—especially at large scale when data exceeds CPU cache. Its biggest advantage comes not from raw compute speed but from efficiently hiding memory latency, enabling faster, more scalable vector search across diverse data types and hardware.

Neocloud traffic is characterized by high-bandwidth, low-endpoint transfers typical of AI workloads, i.e. they have a distinct network signature. Our quarterly reports monitor these trends, concentration, and movements, including magnitude and flow dynamics.How are these elephant flows impacting your infrastructure decisions?

Join the live Q1 Network Stats webinar

Cua is an open-source toolkit for building AI agents that can control desktop computers. It offers tools to drive macOS apps in the background, run agents in VM sandboxes with native window streaming, and evaluate performance on benchmarks like OSWorld and Windows Arena. The MIT-licensed project includes integration with Claude Code and Cursor, records all sessions as replayable trajectories, and supports macOS, Linux, and Windows environments with near-native performance on Apple Silicon.

Microsoft released a preview build of a native TypeScript port (available as @typescript/native-preview on npm), which is being developed in a staging repo called typescript-go that will eventually merge into the main TypeScript repository. The work-in-progress build isn't at full feature parity yet and contains known bugs, with a compatible VS Code extension already available on the marketplace for developers to test.

AI agents are increasingly capable of autonomously discovering and exploiting CI/CD misconfigurations, as demonstrated by a campaign targeting GitHub Actions workflows through injection, permissions abuse, and unpinned dependencies. Datadog IaC Security addresses these risks by scanning workflows pre-merge, enforcing best practices, and expanding detection coverage for triggers, supply chain integrity, and runtime security gaps.

Streaming platforms are evolving beyond scale to address operational and financial challenges through flexible architectures, interoperability, predictable pricing, and real-time visibility. Modern CDNs prioritize efficient global delivery and proactive monitoring to meet rising expectations for high-quality live event streaming.

PointFive maps every AI dollar to the team, model, and inference behind it — then auto-remediates waste. Up to 99% savings on underutilized PTUs.Cut Your AI Costs Now →

LLM-assisted coding doesn't need to be deterministic to be useful—what actually matters is predictability, meaning whether the resulting software behaves reliably and meets expectations.

OpenAI's GPT-5.5 achieved a state-of-the-art 64.66% score on Databricks' OfficeQA benchmark, representing a 13% improvement over GPT-5.4.

Amazon Elastic Container Registry now automatically syncs OCI referrers like signatures, SBOMs, and attestations via pull through cache, eliminating manual retrieval and enabling seamless verification workflows across supported AWS regions.